Network - Revision history

Russ at 20:59, 1 June 2022

2022-06-01T20:59:28Z

← Older revision		Revision as of 20:59, 1 June 2022
Line 30:		Line 30:
	\|-		\|-
	! style="white-space: nowrap" \| emfcamp-insecure22		! style="white-space: nowrap" \| emfcamp-insecure22
	\| '''Warning: insecure on some devices''' This is both 5GHz and 2.4GHz, and can be used for older devices that don't support WPA2-Enterprise. If your device supports [https://en.wikipedia.org/wiki/Opportunistic_Wireless_Encryption Opportunistic Wireless Encryption], such as Android 10 or above, this is encrypted. Otherwise, it's unencrypted, and people will likely intercept your traffic. Inbound connections from the rest of the campsite are possible, inbound connections from the Internet are blocked.		\| '''Warning: insecure on some devices''' This is both 5GHz and 2.4GHz, and can be used for older devices that don't support WPA2-Enterprise. If your device supports [https://en.wikipedia.org/wiki/Opportunistic_Wireless_Encryption Opportunistic Wireless Encryption], such as Android 10 or above, this is encrypted, although not quite as secure as the '''emfcamp''' SSID. Otherwise, it's unencrypted, and people will likely intercept your traffic. Inbound connections from the rest of the campsite are possible, inbound connections from the Internet are blocked.
	\|-		\|-
	! spacenet		! spacenet

Russ: Update for OWE and other bits

2022-06-01T20:56:52Z

Update for OWE and other bits

← Older revision		Revision as of 20:56, 1 June 2022
Line 1:		Line 1:
			<div style="float:right;">__TOC__</div>
	[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.		[[Team:NOC]] has tried to build and support the fastest network for you: a network comparable to a medium sized ISP, built up in just a couple of days. It might not be perfect all the time. We will be providing blanket wireless coverage and wired network access to both venues and camping tents.

Line 4:		Line 5:

	* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.		* To use the camp WiFi on most modern devices, connect to the '''emfcamp''' network with a username of '''emf''' and a password of '''emf'''.
	* ~~You have~~ a ~~public IP address~~ and ~~there is limited network firewalling or filtering~~. ~~[[#Security\|Keep safe!]]~~		* If you're using a modern Android phone (Android 10 or above), the '''emfcamp-insecure22''' network is easier to configure, and it will be encrypted (despite the name).
	* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points\|here's why]].		* Don't set up your own wireless access point. This is a serious problem in such a dense event and [[Network/Rogue Access Points\|here's why]].

Line 26:		Line 27:
	{\| class="wikitable"		{\| class="wikitable"
	! emfcamp		! emfcamp
	\| This is 2.4GHz + 5GHz and should you should use this one in preference, if you can see it. This is the most secure, WPA2-Enterprise.		\| This is 2.4GHz + 5GHz and should you should use this one in preference, if you can see it. This is the most secure, WPA2-Enterprise. However, it's a pain to configure on Android devices.
	\|-		\|-
	! style="white-space: nowrap" \| emfcamp-insecure22		! style="white-space: nowrap" \| emfcamp-insecure22
	\| '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic~~. Filtered connection with public IP address~~. Inbound connections from the rest of the campsite are possible, inbound connections from the Internet are blocked.		\| '''Warning: insecure on some devices''' This is both 5GHz and 2.4GHz, and can be used for older devices that don't support WPA2-Enterprise. If your device supports [https://en.wikipedia.org/wiki/Opportunistic_Wireless_Encryption Opportunistic Wireless Encryption], such as Android 10 or above, this is encrypted. Otherwise, it's unencrypted, and people will likely intercept your traffic. Inbound connections from the rest of the campsite are possible, inbound connections from the Internet are blocked.
	\|-		\|-
	! spacenet		! spacenet
Line 89:		Line 90:
	[[File:Ubuntu network settings.png\|thumb\|Ubuntu network settings]]		[[File:Ubuntu network settings.png\|thumb\|Ubuntu network settings]]
	On Ubuntu/Debian based distros the certificate file can be found in /etc/ssl/certs/ISRG_Root_X1.pem		On Ubuntu/Debian based distros the certificate file can be found in /etc/ssl/certs/ISRG_Root_X1.pem


	'''Android'''		'''Android'''

Andypiper: /* IPv6 */ fix internal link

2022-06-01T11:11:17Z

IPv6: fix internal link

← Older revision		Revision as of 11:11, 1 June 2022
Line 113:		Line 113:
	== IPv6 ==		== IPv6 ==

	Naturally, IPv6 is available throughout the network and should "just work" for you. Team:NOC does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk\|NOC helpdesk]] if you need help.		Naturally, IPv6 is available throughout the network and should "just work" for you. [[Team:NOC]] does not recommend disabling IPv6 if you have problems, instead try to understand the problem you are experiencing and get educated in the new world order. Contact the [[Team:InfoDesk\|NOC helpdesk]] if you need help.

	== Services ==		== Services ==

Ms7821: /* Client Settings */

2022-05-31T23:40:42Z

Client Settings

← Older revision		Revision as of 23:40, 31 May 2022
Line 93:		Line 93:
	'''Android'''		'''Android'''

	This will help you get set up: https://play.google.com/store/apps/details?id=nl.eventinfra.wifisetup		This app will help you get set up: https://play.google.com/store/apps/details?id=nl.eventinfra.wifisetup. Or follow [[Network/802.1X_client_settings#Manually\|these instructions]] to do it manually.

	~~Source https:~~/~~/github~~.~~com/EventInfra/wifisetup~~

	== Wired Ethernet ==		== Wired Ethernet ==

Dave1010: /* Client Settings */ android links

2022-05-31T14:29:47Z

Client Settings: android links

← Older revision		Revision as of 14:29, 31 May 2022
Line 89:		Line 89:
	[[File:Ubuntu network settings.png\|thumb\|Ubuntu network settings]]		[[File:Ubuntu network settings.png\|thumb\|Ubuntu network settings]]
	On Ubuntu/Debian based distros the certificate file can be found in /etc/ssl/certs/ISRG_Root_X1.pem		On Ubuntu/Debian based distros the certificate file can be found in /etc/ssl/certs/ISRG_Root_X1.pem


			'''Android'''

			This will help you get set up: https://play.google.com/store/apps/details?id=nl.eventinfra.wifisetup

			Source https://github.com/EventInfra/wifisetup

	== Wired Ethernet ==		== Wired Ethernet ==

Hexdoll: /* Client Settings */

2022-05-31T10:15:49Z

Client Settings

← Older revision		Revision as of 10:15, 31 May 2022
Line 88:		Line 88:

	[[File:Ubuntu network settings.png\|thumb\|Ubuntu network settings]]		[[File:Ubuntu network settings.png\|thumb\|Ubuntu network settings]]
	~~The~~ certificate file can be ~~selected from~~ /etc/ssl/certs/ISRG_Root_X1.pem		On Ubuntu/Debian based distros the certificate file can be found in /etc/ssl/certs/ISRG_Root_X1.pem

	== Wired Ethernet ==		== Wired Ethernet ==

Hexdoll: /* Client Settings */

2022-05-31T10:12:15Z

Client Settings

← Older revision		Revision as of 10:12, 31 May 2022
Line 86:		Line 86:

	Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate\|here]] for the complete certificate.		Make sure '''you check the certificate''' in order to know you are connecting to the correct network (you should check on both the CN and the CA). Check [[Network/RADIUS_certificate\|here]] for the complete certificate.

			[[File:Ubuntu network settings.png\|thumb\|Ubuntu network settings]]
			The certificate file can be selected from /etc/ssl/certs/ISRG_Root_X1.pem

	== Wired Ethernet ==		== Wired Ethernet ==

Simon at 19:43, 25 May 2022

2022-05-25T19:43:59Z

← Older revision		Revision as of 19:43, 25 May 2022
Line 28:		Line 28:
	\| This is 2.4GHz + 5GHz and should you should use this one in preference, if you can see it. This is the most secure, WPA2-Enterprise.		\| This is 2.4GHz + 5GHz and should you should use this one in preference, if you can see it. This is the most secure, WPA2-Enterprise.
	\|-		\|-
	! emfcamp-insecure22		! style="white-space: nowrap" \| emfcamp-insecure22
	\| '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic. Filtered connection with public IP address. Inbound connections from the rest of the campsite are possible, inbound connections from the Internet are blocked.		\| '''Warning: insecure''' This is both 5GHz and 2.4GHz, and is for older devices that don't support WPA2-Enterprise. It's unencrypted, and people will likely intercept your traffic. Filtered connection with public IP address. Inbound connections from the rest of the campsite are possible, inbound connections from the Internet are blocked.
	\|-		\|-

AK47: /* Client Settings */

2022-05-22T18:13:20Z

Client Settings

← Older revision		Revision as of 18:13, 22 May 2022
Line 68:		Line 68:
	Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.		Also see [[Network/802.1X client settings]] for a list of OS-specific client settings.

	SSID: emfcamp ~~or emfcamp-legacy22~~		SSID: emfcamp

	EAP-TTLS:		EAP-TTLS:

AK47: /* Wireless */

2022-05-22T18:13:06Z

Wireless

← Older revision		Revision as of 18:13, 22 May 2022
Line 26:		Line 26:
	{\| class="wikitable"		{\| class="wikitable"
	! emfcamp		! emfcamp
	\| This is 5GHz and should you should use this one in preference, if you can see it. This is the most secure, ~~WPA2-Enterprise.~~		\| This is 2.4GHz + 5GHz and should you should use this one in preference, if you can see it. This is the most secure, WPA2-Enterprise.
	\|-
	~~! emfcamp-legacy22~~
	~~\| This is 2.4GHz and less resistant to interference, use it only if you have to. This is also~~ WPA2-Enterprise.
	\|-		\|-
	! emfcamp-insecure22		! emfcamp-insecure22